Crystal Olive

Background

About Crystal Olive

With over 18 years of experience in the field of privacy and data protection, I currently serve as the Manager of Privacy, where I lead enterprise-wide initiatives to ensure compliance with global privacy regulations and standards. My expertise encompasses a broad spectrum of privacy frameworks, including PIPEDA, GDPR, provincial legislation, and various industry-specific requirements. In this role, I am responsible for the strategic development and implementation of comprehensive privacy policies, procedures, and data governance frameworks designed to safeguard sensitive information and mitigate organizational risk. I collaborate closely with cross-functional teams—including Legal, IT, Cybersecurity, HR, and Compliance—to embed privacy considerations into business operations and technology solutions. Beyond regulatory compliance, I champion a culture of privacy through targeted employee education, awareness campaigns, and ongoing training programs. I lead privacy impact assessments (PIAs) for new initiatives and technologies, proactively identifying and addressing potential privacy risks. Additionally, I oversee third-party vendor privacy evaluations and manage incident response protocols to ensure timely and effective handling of data breaches. With a strong focus on continuous improvement and audit readiness, I ensure our privacy practices remain agile and aligned with the evolving regulatory landscape. My work supports the organization’s commitment to transparency, accountability, and the responsible stewardship of personal data.